Not responding to a dunning notice is probably a bad idea. They are often legitimate and even when they are not, it can be a mistake.

That's a risk of not responding. A risk of responding is that the response confirms the validity of an address, and the phishing can proceed apace, as well as the now confirmed contact data sold to others of this ilk.